Opencontainers
Vulnerability activity for Opencontainers: what is being exploited, what was published lately, and when the next patch release is due.
Last 30 days
- CVEs
- 0
- Critical (CVSS 9+)
- 0
- Exploited (CISA KEV)
- 0
- With exploit code
- 0
Last 90 days
- CVEs
- 0
- Critical (CVSS 9+)
- 0
- Exploited (CISA KEV)
- 0
- With exploit code
- 0
Last 365 days
- CVEs
- 3
- Critical (CVSS 9+)
- 0
- Exploited (CISA KEV)
- 0
- With exploit code
- 0
Exploited now
None of this vendor's CVEs are on CISA's known-exploited list.
Recent
- 7.3HighNov 6, 2025Opencontainers runc Path traversal / file handlingCVE-2025-52881runc is a CLI tool for spawning and running containers according to the OCI specification. In versions 1.2.7, 1.3.2 and 1.4.0-rc.2, an attacker can trick runc into misdirecting writes to /proc to other procfs files through the use of a racing container with shared mounts (we have also verified this
- 8.4HighNov 6, 2025Opencontainers runc Path traversal / file handlingCVE-2025-52565runc is a CLI tool for spawning and running containers according to the OCI specification. Versions 1.0.0-rc3 through 1.2.7, 1.3.0-rc.1 through 1.3.2, and 1.4.0-rc.1 through 1.4.0-rc.2, due to insufficient checks when bind-mounting `/dev/pts/$n` to `/dev/console` inside the container, an attacker ca
- 7.3HighNov 6, 2025Opencontainers runc Path traversal / file handlingCVE-2025-31133runc is a CLI tool for spawning and running containers according to the OCI specification. In versions 1.2.7 and below, 1.3.0-rc.1 through 1.3.1, 1.4.0-rc.1 and 1.4.0-rc.2 files, runc would not perform sufficient verification that the source of the bind-mount (i.e., the container's /dev/null) was ac
Top products
- runc3 CVEs in the last year
Advisories
Official advisories from the last 90 days that name this vendor's CVEs.
- Google Kubernetes Engine · Nov 10, 2025GCP-2025-066CVE-2025-31133CVE-2025-52565CVE-2025-52881
Counts cover CVEs and advisories Watch Floor tracks, by the date they became news. Updated every 10 minutes.